elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2024-11-22 13:37:02 +01:00
Code Issues Packages Projects Releases Wiki Activity

IMP(4.2.4): use functions in utils

Browse Source
This commit is contained in:
Thibault Ayanides 2020-10-30 14:49:16 +01:00
parent 258da6b4a1
commit ccef85ebe3
1 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
bin/hardening/4.2.4_logs_permissions.sh
View File

@ -22,12 +22,13 @@ audit () {
ERRORS=0 ERRORS=0
for FILE in $($SUDO_CMD find $DIR -type f); for FILE in $($SUDO_CMD find $DIR -type f);
do do
perm=$(stat -L -c '%a' $FILE) has_file_correct_permissions $FILE $PERMISSIONS
echo "$perm ttt $PERMISSIONS" if [ $FNRET = 0 ]; then
if [ "$perm" != "$PERMISSIONS" ]; then ok "$FILE permissions were set to $PERMISSIONS"
else
ERRORS=$((ERRORS+1)) ERRORS=$((ERRORS+1))
crit "Some logs in $DIR permissions were not set to $PERMISSIONS" crit "$FILE permissions were not set to $PERMISSIONS"
fi fi
done done
if [ $ERRORS = 0 ]; then if [ $ERRORS = 0 ]; then
@ -40,12 +41,12 @@ apply () {
ERRORS=0 ERRORS=0
for FILE in $($SUDO_CMD find $DIR -type f); for FILE in $($SUDO_CMD find $DIR -type f);
do do
perm=$(stat -L -c '%a' $FILE) has_file_correct_permissions $FILE $PERMISSIONS
echo "$perm ttt $PERMISSIONS" if [ $FNRET = 0 ]; then
if [ "$perm" != "$PERMISSIONS" ]; then ok "$FILE permissions were set to $PERMISSIONS"
info "fixing $DIR logs permissions to $PERMISSIONS" else
warn "fixing $DIRlogs ownership to $PERMISSIONS"
chmod 0$PERMISSIONS $FILE chmod 0$PERMISSIONS $FILE
fi fi
done done